dodo-mcp 1.2.1 → 1.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +37 -6
- package/dist/cli/dataRecovery.js +38 -0
- package/dist/cli/dataRecovery.js.map +1 -0
- package/dist/cli/deployment.js +61 -0
- package/dist/cli/deployment.js.map +1 -0
- package/dist/cli/main.js +36 -1
- package/dist/cli/main.js.map +1 -1
- package/dist/config/globalConfig.js +3 -5
- package/dist/config/globalConfig.js.map +1 -1
- package/dist/errors.js +1 -1
- package/dist/errors.js.map +1 -1
- package/dist/ipc/server.js +2 -0
- package/dist/ipc/server.js.map +1 -1
- package/dist/ipc/timeouts.js +5 -0
- package/dist/ipc/timeouts.js.map +1 -0
- package/dist/platform/privateFs.js +32 -3
- package/dist/platform/privateFs.js.map +1 -1
- package/dist/platform/windowsPrivateAcl.js +90 -0
- package/dist/platform/windowsPrivateAcl.js.map +1 -0
- package/dist/security/outboundAddress.js +20 -0
- package/dist/security/outboundAddress.js.map +1 -0
- package/dist/server/aiAdmin.js +21 -24
- package/dist/server/aiAdmin.js.map +1 -1
- package/dist/server/appServer.js +3 -6
- package/dist/server/appServer.js.map +1 -1
- package/dist/server/bootstrap.js +14 -0
- package/dist/server/bootstrap.js.map +1 -1
- package/dist/server/configSession.js +21 -0
- package/dist/server/configSession.js.map +1 -0
- package/dist/server/configUi/index.html +3 -0
- package/dist/server/configUi/ui/dataRecovery.js +90 -0
- package/dist/server/configUi/ui/deployment.js +111 -0
- package/dist/server/configUi/ui/recovery.js +167 -0
- package/dist/server/configUi/workbench.js +23 -7
- package/dist/server/installationRuntime.js +3 -1
- package/dist/server/installationRuntime.js.map +1 -1
- package/dist/server/instructions.js.map +1 -1
- package/dist/server/ipcDispatch.js +219 -0
- package/dist/server/ipcDispatch.js.map +1 -1
- package/dist/server/localConfig.js +34 -11
- package/dist/server/localConfig.js.map +1 -1
- package/dist/server/remoteConfig.js +23 -13
- package/dist/server/remoteConfig.js.map +1 -1
- package/dist/server/stdioServer.js +2 -5
- package/dist/server/stdioServer.js.map +1 -1
- package/dist/services/ai/network.js +1 -18
- package/dist/services/ai/network.js.map +1 -1
- package/dist/services/ai/subagents.js +5 -2
- package/dist/services/ai/subagents.js.map +1 -1
- package/dist/services/assistance/verification.js +43 -10
- package/dist/services/assistance/verification.js.map +1 -1
- package/dist/services/changes/applier.js +472 -297
- package/dist/services/changes/applier.js.map +1 -1
- package/dist/services/git/gitService.js +150 -34
- package/dist/services/git/gitService.js.map +1 -1
- package/dist/services/jobs/jobManager.js +59 -2
- package/dist/services/jobs/jobManager.js.map +1 -1
- package/dist/services/jobs/spool.js +9 -3
- package/dist/services/jobs/spool.js.map +1 -1
- package/dist/services/multimodal/mediaService.js +6 -6
- package/dist/services/multimodal/mediaService.js.map +1 -1
- package/dist/services/recovery/configKeys.js +115 -0
- package/dist/services/recovery/configKeys.js.map +1 -0
- package/dist/services/recovery/configVault.js +361 -0
- package/dist/services/recovery/configVault.js.map +1 -0
- package/dist/services/recovery/contracts.js +24 -0
- package/dist/services/recovery/contracts.js.map +1 -0
- package/dist/services/recovery/databaseAwareness.js +179 -0
- package/dist/services/recovery/databaseAwareness.js.map +1 -0
- package/dist/services/recovery/deploymentArchive.js +129 -0
- package/dist/services/recovery/deploymentArchive.js.map +1 -0
- package/dist/services/recovery/deploymentContracts.js +70 -0
- package/dist/services/recovery/deploymentContracts.js.map +1 -0
- package/dist/services/recovery/deploymentHealth.js +143 -0
- package/dist/services/recovery/deploymentHealth.js.map +1 -0
- package/dist/services/recovery/deploymentMaintenance.js +197 -0
- package/dist/services/recovery/deploymentMaintenance.js.map +1 -0
- package/dist/services/recovery/deploymentService.js +429 -0
- package/dist/services/recovery/deploymentService.js.map +1 -0
- package/dist/services/recovery/deploymentSource.js +36 -0
- package/dist/services/recovery/deploymentSource.js.map +1 -0
- package/dist/services/recovery/dockerDeployment.js +172 -0
- package/dist/services/recovery/dockerDeployment.js.map +1 -0
- package/dist/services/recovery/drift.js +178 -0
- package/dist/services/recovery/drift.js.map +1 -0
- package/dist/services/recovery/evidence.js +127 -0
- package/dist/services/recovery/evidence.js.map +1 -0
- package/dist/services/recovery/gitCopies.js +219 -0
- package/dist/services/recovery/gitCopies.js.map +1 -0
- package/dist/services/recovery/history.js +423 -0
- package/dist/services/recovery/history.js.map +1 -0
- package/dist/services/recovery/recoveryService.js +521 -0
- package/dist/services/recovery/recoveryService.js.map +1 -0
- package/dist/services/recovery/storage.js +344 -0
- package/dist/services/recovery/storage.js.map +1 -0
- package/dist/services/schedules/scheduleService.js +9 -10
- package/dist/services/schedules/scheduleService.js.map +1 -1
- package/dist/store/db.js +71 -0
- package/dist/store/db.js.map +1 -1
- package/dist/tools/catalog.js +4 -0
- package/dist/tools/catalog.js.map +1 -1
- package/dist/tools/changeTools.js +1 -1
- package/dist/tools/changeTools.js.map +1 -1
- package/dist/tools/context.js +23 -3
- package/dist/tools/context.js.map +1 -1
- package/dist/tools/deploymentTools.js +58 -0
- package/dist/tools/deploymentTools.js.map +1 -0
- package/dist/tools/directTools.js +9 -5
- package/dist/tools/directTools.js.map +1 -1
- package/dist/tools/gitTools.js +7 -2
- package/dist/tools/gitTools.js.map +1 -1
- package/dist/tools/jobTools.js +4 -4
- package/dist/tools/jobTools.js.map +1 -1
- package/dist/tools/projectTools.js +1 -0
- package/dist/tools/projectTools.js.map +1 -1
- package/dist/tools/recoveryTools.js +79 -0
- package/dist/tools/recoveryTools.js.map +1 -0
- package/dist/tools/runtimeTools.js +1 -1
- package/dist/tools/runtimeTools.js.map +1 -1
- package/dist/tools/surface.js +6 -1
- package/dist/tools/surface.js.map +1 -1
- package/dist/tunnel/credentials.js +1 -1
- package/dist/tunnel/credentials.js.map +1 -1
- package/docs/ARCHITECTURE.md +92 -2
- package/docs/CI.md +118 -0
- package/docs/COMPATIBILITY.md +7 -6
- package/docs/EVALUATION.md +17 -12
- package/docs/MANUAL_ACCEPTANCE.md +72 -2
- package/docs/MCP_CONNECTIONS.md +238 -0
- package/docs/RECOVERY.md +448 -0
- package/docs/RELEASE_1.3.0.md +64 -0
- package/docs/RELEASE_1.3.1.md +49 -0
- package/docs/RELEASE_NOTES.md +31 -0
- package/docs/SECURITY.md +123 -0
- package/docs/TEST_REPORT.md +312 -5
- package/docs/TUNNEL.md +6 -0
- package/docs/WEB_CLIENTS.md +3 -0
- package/docs/adr/047-temporary-remote-config.md +11 -0
- package/docs/adr/051-source-recovery-foundation.md +45 -0
- package/docs/adr/052-reviewed-source-restore.md +50 -0
- package/docs/adr/053-content-drift-and-private-git-recovery.md +29 -0
- package/docs/adr/054-verified-source-checkpoints.md +58 -0
- package/docs/adr/055-reviewed-docker-deployments.md +42 -0
- package/docs/adr/056-owner-data-recovery.md +47 -0
- package/docs/adr/README.md +7 -0
- package/native/private-state-windows.cs +105 -0
- package/package.json +8 -1
- package/schemas/global-config.schema.json +34 -0
- package/schemas/tools.compact.json +175 -15
- package/schemas/tools.hybrid.json +350 -16
- package/schemas/tools.json +4883 -816
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deploymentMaintenance.js","sourceRoot":"","sources":["../../../src/services/recovery/deploymentMaintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACvE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACnH,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7E,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3E,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3E,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACzE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CACvH,CAAC,CAAC;AAOH;kFACkF;AAClF,MAAM,OAAO,qBAAqB;IACH;IAAiC;IAC3C;IAAkD;IAClD;IAFnB,YAA6B,CAAc,EAAmB,UAAsB,EACjE,OAA+B,EAAmB,MAA8B,EAChF,OAAoE;QAF1D,MAAC,GAAD,CAAC,CAAa;QAAmB,eAAU,GAAV,UAAU,CAAY;QACjE,YAAO,GAAP,OAAO,CAAwB;QAAmB,WAAM,GAAN,MAAM,CAAwB;QAChF,YAAO,GAAP,OAAO,CAA6D;IAAG,CAAC;IAC3F,IAAY,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,CAAC,EAAU;QACrB,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAmB;eAClH,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9F,CAAC;IACO,UAAU,CAAC,EAAU;QAC3B,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8HAA8H,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACzJ,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,sFAAsF,CAAC,CAAC;IAC5H,CAAC;IACO,KAAK,CAAC,WAAW,CAAC,IAAoB,EAAE,SAAiB;QAC/D,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,wEAAwE,CAAC,CAAC;QACtJ,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1E,IAAG,IAAI,KAAG,OAAO,EAAC,CAAC;YACjB,IAAG,CAAC,MAAM,CAAC,WAAW,IAAE,CAAC,IAAI,CAAC,YAAY;gBAAC,MAAM,IAAI,SAAS,CAAC,WAAW,EAAC,qCAAqC,CAAC,CAAC;YAClH,OAAO,EAAC,UAAU,EAAC,MAAM,CAAC,IAAI,EAAC,KAAK,EAAC,MAAM,CAAC,WAAW,EAAC,MAAM,EAAC,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,EAAC,CAAC;QACnH,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;YACnF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAgB,CAAC;YACzD,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3F,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,qDAAqD,CAAC,CAAC;QAC/I,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC,UAAU,EAAE;YACjG,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;YACnF,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;YAC1G,MAAM,EAAE,uDAAuD,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC;IACxG,CAAC;IACO,KAAK,CAAC,OAAO,CAAC,QAAgB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kGAAkG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAA0B,CAAC;QACxK,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,0DAA0D,CAAC,CAAC;QACzH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,IAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,WAAW,IAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,IAAE,CAAC,CAAC,IAAI,CAAC,UAAU,KAAG,MAAM,CAAC,IAAI,CAAC;YACzG,MAAM,IAAI,SAAS,CAAC,UAAU,EAAC,kGAAkG,CAAC,CAAC;QACrI,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+FAA+F,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAwF,CAAC;QACtO,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO;gBACnF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QACpF,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,EAAE,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;YAC7H,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;YACrD,IAAI,SAAS,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACxG,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvF,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACzE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAC9B,IAAI,IAAI,CAAC,MAAM;oBAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBAC1C,IAAI,IAAI,CAAC,YAAY;oBAAE,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;gBACnF,IAAI,OAAO,EAAE,aAAa,KAAK,YAAY,IAAI,OAAO,EAAE,WAAW,KAAK,YAAY;oBAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBACxH,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBAC1J,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE;oBAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAChG,CAAC;YACD,2EAA2E;YAC3E,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kFAAkF,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACpK,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnK,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc;YACnI,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IAClE,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,GAAY;QACxB,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC/E,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,cAAc,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAC;YACjJ,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gJAAgJ,CAAC;iBAC9J,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5H,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAG,eAAe,CAAA,CAAC,CAAA,OAAO,CAAA,CAAC,CAAA,SAAS,CAAC;YAC5J,MAAM,SAAS,GAAG,UAAU,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;YAC5E,MAAM,MAAM,GAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;YACtH,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,wFAAwF;YACxF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uGAAuG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7J,IAAK,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAmB,CAAC,CAAC,IAAI,IAAI;gBACpJ,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,CAAC;YAC3E,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,EAAE,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;YAC3G,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mEAAmE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;YAC5K,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yEAAyE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAC5C,CAAC;QAClG,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,0BAA0B,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAW,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,mCAAmC,CAAC,CAAC;QACvJ,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACzF,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,2CAA2C,CAAC,CAAC;QACnJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,yDAAyD,CAAC,CAAC;QAClJ,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,KAAK,CAAC;QAC9I,CAAC,CAAC;QACF,+EAA+E;QAC/E,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC9B,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2KAA2K,CAAC;qBACzL,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAClJ,CAAC;iBAAM,IAAG,MAAM,CAAC,IAAI,KAAG,OAAO,EAAC,CAAC;gBAC/B,MAAM,QAAQ,GAAC,MAAoC,CAAC;gBACpD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,EAAC,KAAK,EAAC,kBAAkB,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,CAAC,EAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACtQ,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACzC,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAE,MAAiC,CAAC,KAAK,CAAC,CAAC;YAC5G,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,MAA+D,CAAC;gBAC7E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACtD,IAAI,CAAC,UAAU,EAAE,CAAC;oBAAC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC;oBACrE,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW;wBAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kKAAkK,CAAC;6BACnN,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;oBAChG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC1F,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClB,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW;wBAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2FAA2F,CAAC;6BAC5I,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;YACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACvE,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACpI,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,YAAY,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACpJ,CAAC;IACH,CAAC;IACO,KAAK,CAAC,EAAU,EAAE,MAAc,EAAE,MAAc;QACtD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,0BAA0B,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/L,CAAC;CACF"}
|
|
@@ -0,0 +1,429 @@
|
|
|
1
|
+
import { z } from 'zod';
|
|
2
|
+
import { DodoError } from '../../errors.js';
|
|
3
|
+
import { digestOf, newId } from '../../util/hash.js';
|
|
4
|
+
import { rootIdentity } from './storage.js';
|
|
5
|
+
import { DeploymentTargetSchema } from './deploymentContracts.js';
|
|
6
|
+
import { buildContextEntries, recoverySourceDigest, sourceComparison } from './deploymentSource.js';
|
|
7
|
+
import { validateHealthUrl } from './deploymentHealth.js';
|
|
8
|
+
import { evaluateHealth, readHealth } from './deploymentHealth.js';
|
|
9
|
+
import { packDeploymentSource } from './deploymentArchive.js';
|
|
10
|
+
import { mappedSourceEntries } from './deploymentSource.js';
|
|
11
|
+
import { DockerDeploymentAdapter } from './dockerDeployment.js';
|
|
12
|
+
import { policyGate } from '../../tools/context.js';
|
|
13
|
+
import { sha256Bytes } from '../../util/hash.js';
|
|
14
|
+
import { DeploymentMaintenance, DeploymentMaintenanceInput } from './deploymentMaintenance.js';
|
|
15
|
+
import { isOwner } from '../../security/projectAuthority.js';
|
|
16
|
+
/** Durable provenance. Owner target configuration never grants execution authority. */
|
|
17
|
+
export class RecoveryDeployments {
|
|
18
|
+
s;
|
|
19
|
+
r;
|
|
20
|
+
constructor(s, r) {
|
|
21
|
+
this.s = s;
|
|
22
|
+
this.r = r;
|
|
23
|
+
}
|
|
24
|
+
get db() { return this.s.store.db; }
|
|
25
|
+
get networkPolicy() { return { ...this.s.config, controlPorts: this.s.installation?.ai.settings.ports ?? [] }; }
|
|
26
|
+
target(id) {
|
|
27
|
+
this.r.assertProject();
|
|
28
|
+
const row = this.db.prepare('SELECT * FROM recovery_deployment_targets WHERE id=? AND workspace_id=?').get(id, this.s.workspaceId);
|
|
29
|
+
if (!row)
|
|
30
|
+
throw new DodoError('NOT_FOUND', 'deployment target unavailable for this project');
|
|
31
|
+
const definition = DeploymentTargetSchema.parse(JSON.parse(row.payload));
|
|
32
|
+
return { id: row.id, revision: row.revision, definition, hash: digestOf(definition), enabled: Boolean(row.enabled) };
|
|
33
|
+
}
|
|
34
|
+
targets() {
|
|
35
|
+
this.r.assertProject();
|
|
36
|
+
const rows = this.db.prepare('SELECT id FROM recovery_deployment_targets WHERE workspace_id=? ORDER BY id').all(this.s.workspaceId);
|
|
37
|
+
return rows.map(row => this.target(row.id));
|
|
38
|
+
}
|
|
39
|
+
summary() {
|
|
40
|
+
const count = this.db.prepare('SELECT COUNT(*) AS n FROM recovery_deployment_targets WHERE workspace_id=?').get(this.s.workspaceId).n;
|
|
41
|
+
return { state: count ? 'CONFIGURED_LIVE_STATUS_UNKNOWN' : 'NOT_CONFIGURED', targetCount: count, liveHealth: 'NOT_CHECKED' };
|
|
42
|
+
}
|
|
43
|
+
/** Called only by authenticated owner administration, never exposed as an MCP operation. */
|
|
44
|
+
async configure(raw, revalidate) {
|
|
45
|
+
const body = z.object({ targetId: z.string().max(128).optional(), expectedRevision: z.number().int().nonnegative(), enabled: z.boolean(),
|
|
46
|
+
definition: DeploymentTargetSchema, confirmDaemonAccess: z.literal(true) }).strict().parse(raw);
|
|
47
|
+
return this.s.mutations.run(async () => {
|
|
48
|
+
this.r.assertProject();
|
|
49
|
+
const d = body.definition;
|
|
50
|
+
for (const rel of [d.contextRoot, d.contextRoot === '.' ? d.dockerfile : `${d.contextRoot}/${d.dockerfile}`, d.sourceMapping?.workspaceRoot]) {
|
|
51
|
+
if (rel && rel !== '.')
|
|
52
|
+
this.r.assertSourcePath(rel);
|
|
53
|
+
}
|
|
54
|
+
for (const check of d.health)
|
|
55
|
+
validateHealthUrl(check, this.networkPolicy);
|
|
56
|
+
const tasks = this.s.overview.discoverTasks(this.s.projectConfig);
|
|
57
|
+
if (d.requiredChecks.some(check => !tasks.some(task => task.id === check.taskId && task.recipeDigest === check.recipeDigest)))
|
|
58
|
+
throw new DodoError('CONFLICT', 'required verification recipe changed or is unavailable; review current recipes');
|
|
59
|
+
revalidate();
|
|
60
|
+
return this.db.transaction(() => {
|
|
61
|
+
const existing = body.targetId ? this.target(body.targetId) : undefined;
|
|
62
|
+
if ((existing?.revision ?? 0) !== body.expectedRevision)
|
|
63
|
+
throw new DodoError('CONFLICT', 'deployment target revision changed; refresh before saving');
|
|
64
|
+
if (!existing && this.targets().length >= 20)
|
|
65
|
+
throw new DodoError('RESOURCE_LIMIT', 'deployment target limit reached');
|
|
66
|
+
if (existing && this.db.prepare("SELECT 1 FROM recovery_deployments d LEFT JOIN recovery_deployment_maintenance m ON m.deployment_id=d.id WHERE d.target_id=? AND (d.state IN ('BUILDING','DEPLOYING','HEALTH_CHECKING') OR (d.state='UNKNOWN' AND m.resolution_json IS NULL)) LIMIT 1").get(existing.id))
|
|
67
|
+
throw new DodoError('CONFLICT', 'inspect unfinished deployment outcomes before changing this target');
|
|
68
|
+
const id = existing?.id ?? newId('deploytarget'), revision = body.expectedRevision + 1;
|
|
69
|
+
// Installation-wide identity prevents two projects claiming the same Compose service.
|
|
70
|
+
const collision = this.db.prepare('SELECT id FROM recovery_deployment_targets WHERE docker_context=? AND compose_project=? AND service=? AND id<>?')
|
|
71
|
+
.get(d.dockerContext, d.composeProject, d.service, id);
|
|
72
|
+
if (collision)
|
|
73
|
+
throw new DodoError('CONFLICT', 'this Docker Compose service is already registered');
|
|
74
|
+
this.db.prepare(`INSERT INTO recovery_deployment_targets (id,workspace_id,revision,enabled,payload,docker_context,compose_project,service,updated_at)
|
|
75
|
+
VALUES (?,?,?,?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET revision=excluded.revision,enabled=excluded.enabled,payload=excluded.payload,
|
|
76
|
+
docker_context=excluded.docker_context,compose_project=excluded.compose_project,service=excluded.service,updated_at=excluded.updated_at`)
|
|
77
|
+
.run(id, this.s.workspaceId, revision, Number(body.enabled), JSON.stringify(d), d.dockerContext, d.composeProject, d.service, Date.now());
|
|
78
|
+
this.s.store.audit({ principal: 'local-config-owner', workspaceId: this.s.workspaceId, tool: 'deployment.target.configure', refId: id, inputDigest: digestOf(d), result: body.enabled ? 'enabled' : 'disabled' });
|
|
79
|
+
return this.target(id);
|
|
80
|
+
}).immediate();
|
|
81
|
+
});
|
|
82
|
+
}
|
|
83
|
+
row(id, actor) {
|
|
84
|
+
this.r.assertProject();
|
|
85
|
+
const row = this.db.prepare('SELECT * FROM recovery_deployments WHERE id=? AND workspace_id=?').get(id, this.s.workspaceId);
|
|
86
|
+
if (!row || (!actor.owner && row.actor !== actor.id))
|
|
87
|
+
throw new DodoError('NOT_FOUND', 'deployment unavailable for this caller/project');
|
|
88
|
+
return row;
|
|
89
|
+
}
|
|
90
|
+
inspect(id, actor) {
|
|
91
|
+
const row = this.row(id, actor), plan = JSON.parse(row.payload);
|
|
92
|
+
if (digestOf(plan) !== row.plan_hash)
|
|
93
|
+
throw new DodoError('RECOVERY_REQUIRED', 'deployment plan integrity failed');
|
|
94
|
+
const maintenance = this.db.prepare('SELECT pinned,retired,probe_json,resolution_json,cleanup_json FROM recovery_deployment_maintenance WHERE deployment_id=?').get(id);
|
|
95
|
+
return { plan, planHash: row.plan_hash, state: row.state, imageDigest: row.image_digest,
|
|
96
|
+
retention: { pinned: Boolean(maintenance?.pinned), imageRetired: Boolean(maintenance?.retired), unfinishedProbe: Boolean(maintenance?.probe_json && !JSON.parse(maintenance.probe_json).removed), uncertaintyAcknowledged: Boolean(maintenance?.resolution_json), cleanupOutcome: maintenance?.cleanup_json ? JSON.parse(maintenance.cleanup_json) : null },
|
|
97
|
+
outcome: row.result_json ? JSON.parse(row.result_json) : null };
|
|
98
|
+
}
|
|
99
|
+
list(actor, cursor = 0, limit = 20) {
|
|
100
|
+
this.r.assertProject();
|
|
101
|
+
const page = z.object({ cursor: z.number().int().min(0).max(1000000), limit: z.number().int().min(1).max(50) }).parse({ cursor, limit });
|
|
102
|
+
const rows = this.db.prepare(`SELECT id FROM recovery_deployments WHERE workspace_id=? ${actor.owner ? '' : 'AND actor=?'} ORDER BY created_at DESC,id LIMIT ? OFFSET ?`)
|
|
103
|
+
.all(this.s.workspaceId, ...(actor.owner ? [] : [actor.id]), page.limit + 1, page.cursor);
|
|
104
|
+
return { items: rows.slice(0, page.limit).map(row => this.inspect(row.id, actor)), nextCursor: rows.length > page.limit ? page.cursor + page.limit : null };
|
|
105
|
+
}
|
|
106
|
+
async prepare(raw, actor, revalidate) {
|
|
107
|
+
const body = z.object({ targetId: z.string().min(1).max(128), expectedTargetRevision: z.number().int().positive(),
|
|
108
|
+
verificationId: z.string().min(1).max(128), idempotencyKey: z.string().min(8).max(128) }).strict().parse(raw);
|
|
109
|
+
return this.s.mutations.run(async () => {
|
|
110
|
+
this.r.assertProject();
|
|
111
|
+
revalidate();
|
|
112
|
+
const key = digestOf(body.idempotencyKey), requestHash = digestOf({ targetId: body.targetId, revision: body.expectedTargetRevision, verificationId: body.verificationId });
|
|
113
|
+
const previous = this.db.prepare('SELECT id,request_hash FROM recovery_deployments WHERE workspace_id=? AND actor=? AND key_hash=?')
|
|
114
|
+
.get(this.s.workspaceId, actor.id, key);
|
|
115
|
+
if (previous) {
|
|
116
|
+
if (previous.request_hash !== requestHash)
|
|
117
|
+
throw new DodoError('IDEMPOTENCY_CONFLICT', 'deployment key already binds different inputs');
|
|
118
|
+
return { ...this.inspect(previous.id, actor), replayed: true };
|
|
119
|
+
}
|
|
120
|
+
const target = this.target(body.targetId);
|
|
121
|
+
if (this.db.prepare('SELECT COUNT(*) AS n FROM recovery_deployments WHERE target_id=?').get(target.id).n >= 500)
|
|
122
|
+
throw new DodoError('RESOURCE_LIMIT', 'deployment record limit reached for this target');
|
|
123
|
+
if (!this.r.policy().enabled || !target.enabled)
|
|
124
|
+
throw new DodoError('FORBIDDEN', 'enable Recovery and this deployment target before preparing');
|
|
125
|
+
if (target.revision !== body.expectedTargetRevision)
|
|
126
|
+
throw new DodoError('CONFLICT', 'deployment target changed since review');
|
|
127
|
+
await this.r.drift.guard();
|
|
128
|
+
const verification = await this.r.evidence.inspect(body.verificationId, actor);
|
|
129
|
+
if (verification.state !== 'VERIFIED' || !verification.evidence)
|
|
130
|
+
throw new DodoError('CONFLICT', 'deployment needs current manifest-bound VERIFIED evidence');
|
|
131
|
+
if (target.definition.requiredChecks.some(required => !verification.evidence.requiredChecks.some(check => check.taskId === required.taskId && check.recipeDigest === required.recipeDigest && check.jobId)))
|
|
132
|
+
throw new DodoError('CONFLICT', 'verification does not cover every owner-required deployment check');
|
|
133
|
+
const manifest = await this.r.history.manifest(verification.checkpointId, actor);
|
|
134
|
+
for (const entry of manifest.entries)
|
|
135
|
+
this.r.assertSourcePath(entry.path);
|
|
136
|
+
const context = buildContextEntries(manifest, target.definition);
|
|
137
|
+
const sourceDigest = recoverySourceDigest(manifest.entries);
|
|
138
|
+
if (sourceDigest !== recoverySourceDigest(await this.r.currentEntries()))
|
|
139
|
+
throw new DodoError('FILE_CHANGED', 'source changed while preparing deployment');
|
|
140
|
+
revalidate();
|
|
141
|
+
const now = Date.now();
|
|
142
|
+
const plan = { version: 1, deploymentId: newId('deploy'), workspaceId: this.s.workspaceId, epoch: this.s.epoch,
|
|
143
|
+
rootIdentity: rootIdentity(this.s.wfs.root), actor: actor.id, targetId: target.id, targetRevision: target.revision, targetHash: target.hash,
|
|
144
|
+
checkpointId: manifest.id, manifestHash: digestOf(manifest), sourceDigest, contextDigest: recoverySourceDigest(context),
|
|
145
|
+
verificationId: body.verificationId, verificationDigest: digestOf(verification.evidence), createdAt: now, expiresAt: now + 30 * 60000 };
|
|
146
|
+
this.db.transaction(() => {
|
|
147
|
+
this.db.prepare(`INSERT INTO recovery_deployments (id,workspace_id,actor,target_id,snapshot_id,key_hash,request_hash,payload,plan_hash,state,created_at)
|
|
148
|
+
VALUES (?,?,?,?,?,?,?,?,?,'PREPARED',?)`).run(plan.deploymentId, this.s.workspaceId, actor.id, target.id, manifest.id, key, requestHash, JSON.stringify(plan), digestOf(plan), now);
|
|
149
|
+
this.s.store.audit({ principal: actor.id, workspaceId: this.s.workspaceId, tool: 'deployment.prepare', refId: plan.deploymentId, inputDigest: digestOf(plan), result: 'prepared_no_effects' });
|
|
150
|
+
}).immediate();
|
|
151
|
+
return { ...this.inspect(plan.deploymentId, actor), replayed: false };
|
|
152
|
+
});
|
|
153
|
+
}
|
|
154
|
+
/** Called at each execution boundary inside the project's mutation queue. */
|
|
155
|
+
async validate(id, planHash, actor, revalidate) {
|
|
156
|
+
const record = this.inspect(id, actor), p = record.plan;
|
|
157
|
+
if (record.planHash !== planHash)
|
|
158
|
+
throw new DodoError('PLAN_HASH_MISMATCH', 'review the exact deployment plan');
|
|
159
|
+
if (p.epoch !== this.s.epoch || p.rootIdentity !== rootIdentity(this.s.wfs.root))
|
|
160
|
+
throw new DodoError('STALE_WORKSPACE', 'deployment context changed; inspect outcome before preparing again');
|
|
161
|
+
if (Date.now() > p.expiresAt)
|
|
162
|
+
throw new DodoError('PLAN_EXPIRED', 'deployment plan expired; no automatic retry');
|
|
163
|
+
const target = this.target(p.targetId);
|
|
164
|
+
if (!this.r.policy().enabled || !target.enabled)
|
|
165
|
+
throw new DodoError('FORBIDDEN', 'Recovery or deployment target is disabled');
|
|
166
|
+
if (target.revision !== p.targetRevision || target.hash !== p.targetHash)
|
|
167
|
+
throw new DodoError('CONFLICT', 'deployment target changed');
|
|
168
|
+
const m = await this.r.history.manifest(p.checkpointId, actor);
|
|
169
|
+
for (const entry of m.entries)
|
|
170
|
+
this.r.assertSourcePath(entry.path);
|
|
171
|
+
if (digestOf(m) !== p.manifestHash || recoverySourceDigest(buildContextEntries(m, target.definition)) !== p.contextDigest)
|
|
172
|
+
throw new DodoError('RECOVERY_REQUIRED', 'deployment manifest no longer matches its recorded context');
|
|
173
|
+
if (recoverySourceDigest(await this.r.currentEntries()) !== p.sourceDigest)
|
|
174
|
+
throw new DodoError('FILE_CHANGED', 'source changed since deployment review');
|
|
175
|
+
if (p.rollback) {
|
|
176
|
+
const original = this.inspect(p.rollback.fromDeploymentId, actor);
|
|
177
|
+
if (original.state !== 'KNOWN_GOOD' || original.imageDigest !== record.imageDigest || original.plan.manifestHash !== p.manifestHash
|
|
178
|
+
|| original.plan.verificationDigest !== p.verificationDigest || original.plan.targetHash !== p.targetHash)
|
|
179
|
+
throw new DodoError('RECOVERY_REQUIRED', 'rollback no longer binds its original verified known-good image');
|
|
180
|
+
}
|
|
181
|
+
else {
|
|
182
|
+
const verification = await this.r.evidence.inspect(p.verificationId, actor);
|
|
183
|
+
if (verification.state !== 'VERIFIED' || digestOf(verification.evidence) !== p.verificationDigest)
|
|
184
|
+
throw new DodoError('CONFLICT', 'deployment verification is no longer current');
|
|
185
|
+
}
|
|
186
|
+
revalidate();
|
|
187
|
+
return { ...record, target, manifest: m };
|
|
188
|
+
}
|
|
189
|
+
async compare(id, actor) {
|
|
190
|
+
const record = this.inspect(id, actor), m = await this.r.history.manifest(record.plan.checkpointId, actor);
|
|
191
|
+
const allowed = m.entries.filter(e => { try {
|
|
192
|
+
this.r.assertSourcePath(e.path);
|
|
193
|
+
return true;
|
|
194
|
+
}
|
|
195
|
+
catch {
|
|
196
|
+
return false;
|
|
197
|
+
} });
|
|
198
|
+
return { deploymentId: id, state: record.state, source: sourceComparison(allowed, await this.r.currentEntries()),
|
|
199
|
+
production: 'UNKNOWN', reason: 'live_container_inspection_required', labelsAreProof: false };
|
|
200
|
+
}
|
|
201
|
+
authority(ctx) {
|
|
202
|
+
// HTTP registration adds request-local lifecycle hooks to a shallow service
|
|
203
|
+
// view. Bind its runtime/state, not the wrapper object's identity.
|
|
204
|
+
if (ctx.services.recovery !== this.r || ctx.services.store !== this.s.store || ctx.services.wfs !== this.s.wfs
|
|
205
|
+
|| ctx.services.workspaceId !== this.s.workspaceId || ctx.services.epoch !== this.s.epoch || !ctx.revalidate)
|
|
206
|
+
throw new DodoError('AUTH_REQUIRED', 'deployment needs a live invocation authority');
|
|
207
|
+
return () => {
|
|
208
|
+
ctx.revalidate();
|
|
209
|
+
this.r.assertProject();
|
|
210
|
+
if (!ctx.principal.scopes.includes('dodo:exec') || this.s.trustMode() !== ctx.trustMode)
|
|
211
|
+
throw new DodoError('FORBIDDEN', 'deployment exec authority changed');
|
|
212
|
+
};
|
|
213
|
+
}
|
|
214
|
+
adapter(id, planHash, actor, target, revalidate) {
|
|
215
|
+
return new DockerDeploymentAdapter(this.s, actor.id, target, revalidate, (jobId, stage) => {
|
|
216
|
+
this.db.prepare('INSERT INTO recovery_deployment_jobs VALUES (?,?,?,?)').run(id, jobId, stage, Date.now());
|
|
217
|
+
}, async () => { await this.validate(id, planHash, actor, revalidate); }, probe => {
|
|
218
|
+
this.db.prepare('INSERT INTO recovery_deployment_maintenance(deployment_id,probe_json) VALUES (?,?) ON CONFLICT(deployment_id) DO UPDATE SET probe_json=excluded.probe_json').run(id, JSON.stringify(probe));
|
|
219
|
+
});
|
|
220
|
+
}
|
|
221
|
+
outcome(id, state, value) {
|
|
222
|
+
this.db.prepare('UPDATE recovery_deployments SET state=?,result_json=? WHERE id=? AND workspace_id=?')
|
|
223
|
+
.run(state, JSON.stringify(value), id, this.s.workspaceId);
|
|
224
|
+
}
|
|
225
|
+
async prepareRollback(id, idempotencyKey, ctx) {
|
|
226
|
+
z.string().min(8).max(128).parse(idempotencyKey);
|
|
227
|
+
const revalidate = this.authority(ctx), actor = { id: ctx.principal.grantId, owner: isOwner(ctx.principal) };
|
|
228
|
+
return this.s.mutations.run(async () => {
|
|
229
|
+
revalidate();
|
|
230
|
+
const original = this.inspect(id, actor), target = this.target(original.plan.targetId);
|
|
231
|
+
const requestHash = digestOf({ kind: 'rollback', fromDeploymentId: id }), key = digestOf(idempotencyKey);
|
|
232
|
+
const old = this.db.prepare('SELECT id,request_hash FROM recovery_deployments WHERE workspace_id=? AND actor=? AND key_hash=?').get(this.s.workspaceId, actor.id, key);
|
|
233
|
+
if (old) {
|
|
234
|
+
if (old.request_hash !== requestHash)
|
|
235
|
+
throw new DodoError('IDEMPOTENCY_CONFLICT', 'key binds another deployment operation');
|
|
236
|
+
return { ...this.inspect(old.id, actor), replayed: true };
|
|
237
|
+
}
|
|
238
|
+
if (!this.r.policy().enabled || !target.enabled || target.hash !== original.plan.targetHash || original.state !== 'KNOWN_GOOD' || !original.imageDigest || original.retention.imageRetired)
|
|
239
|
+
throw new DodoError('CONFLICT', 'rollback requires a recorded known-good image and the same enabled owner target');
|
|
240
|
+
policyGate(ctx, { tool: 'deployment_rollback_prepare', action: 'exec', approvalAction: { deploymentId: id, imageDigest: original.imageDigest, targetHash: target.hash },
|
|
241
|
+
summary: 'inspect current Docker service and prepare an image-only rollback; no deploy, rebuild or database migration' });
|
|
242
|
+
await this.r.drift.guard();
|
|
243
|
+
const adapter = this.adapter(id, original.planHash, actor, target.definition, revalidate);
|
|
244
|
+
const containers = await adapter.containers();
|
|
245
|
+
const manifest = await this.r.history.manifest(original.plan.checkpointId, actor);
|
|
246
|
+
if (digestOf(manifest) !== original.plan.manifestHash)
|
|
247
|
+
throw new DodoError('RECOVERY_REQUIRED', 'rollback source manifest changed');
|
|
248
|
+
for (const entry of manifest.entries)
|
|
249
|
+
this.r.assertSourcePath(entry.path);
|
|
250
|
+
const pointer = this.db.prepare('SELECT revision FROM recovery_production_pointers WHERE target_id=?').get(target.id);
|
|
251
|
+
const now = Date.now(), plan = { ...original.plan, deploymentId: newId('deploy'), actor: actor.id, epoch: this.s.epoch,
|
|
252
|
+
rootIdentity: rootIdentity(this.s.wfs.root), sourceDigest: recoverySourceDigest(await this.r.currentEntries()),
|
|
253
|
+
targetRevision: target.revision, createdAt: now, expiresAt: now + 30 * 60000,
|
|
254
|
+
rollback: { fromDeploymentId: id, observedContainersHash: digestOf(containers), pointerRevision: pointer?.revision ?? 0 } };
|
|
255
|
+
revalidate();
|
|
256
|
+
this.db.prepare(`INSERT INTO recovery_deployments (id,workspace_id,actor,target_id,snapshot_id,key_hash,request_hash,payload,plan_hash,state,image_digest,result_json,created_at)
|
|
257
|
+
VALUES (?,?,?,?,?,?,?,?,?,'BUILT',?,?,?)`).run(plan.deploymentId, this.s.workspaceId, actor.id, target.id, manifest.id, key, requestHash, JSON.stringify(plan), digestOf(plan), original.imageDigest, JSON.stringify({ kind: 'reviewed_image_rollback', rebuilt: false, originalVerificationIsHistorical: true, requiresFreshHealth: true }), now);
|
|
258
|
+
this.s.store.audit({ principal: actor.id, workspaceId: this.s.workspaceId, tool: 'deployment.rollback.prepare', refId: plan.deploymentId, inputDigest: digestOf(plan), result: 'prepared_no_deploy' });
|
|
259
|
+
return { ...this.inspect(plan.deploymentId, actor), replayed: false };
|
|
260
|
+
});
|
|
261
|
+
}
|
|
262
|
+
/** Live observation is separate from durable deployment success, and never retries effects. */
|
|
263
|
+
async observe(id, ctx, sourcePreview = false) {
|
|
264
|
+
const revalidate = this.authority(ctx), actor = { id: ctx.principal.grantId, owner: isOwner(ctx.principal) };
|
|
265
|
+
return this.s.mutations.run(async () => {
|
|
266
|
+
revalidate();
|
|
267
|
+
const record = this.inspect(id, actor), target = this.target(record.plan.targetId);
|
|
268
|
+
if (!target.enabled || target.hash !== record.plan.targetHash)
|
|
269
|
+
throw new DodoError('CONFLICT', 'review the original enabled target before inspecting its deployment');
|
|
270
|
+
policyGate(ctx, { tool: sourcePreview ? 'deployment_source_preview' : 'deployment_observe', action: 'exec',
|
|
271
|
+
approvalAction: { deploymentId: id, targetHash: target.hash }, summary: 'inspect the registered Docker service and declared source without stopping it or copying volume data' });
|
|
272
|
+
const adapter = this.adapter(id, record.planHash, actor, target.definition, revalidate);
|
|
273
|
+
const containers = await adapter.containers();
|
|
274
|
+
const imageMatches = Boolean(record.imageDigest && containers.length === 1 && containers[0].image === record.imageDigest);
|
|
275
|
+
let source = { state: target.definition.sourceMapping ? 'UNVERIFIED' : 'NOT_DECLARED' };
|
|
276
|
+
if (imageMatches && target.definition.sourceMapping) {
|
|
277
|
+
const manifest = await this.r.history.manifest(record.plan.checkpointId, actor);
|
|
278
|
+
if (digestOf(manifest) !== record.plan.manifestHash)
|
|
279
|
+
throw new DodoError('RECOVERY_REQUIRED', 'source manifest changed');
|
|
280
|
+
const mapped = mappedSourceEntries(manifest, target.definition), root = target.definition.sourceMapping.workspaceRoot;
|
|
281
|
+
const bytes = await adapter.sourceFromContainer(containers[0].id, record.imageDigest, mapped, name => this.r.assertSourcePath(root === '.' ? name : `${root}/${name}`));
|
|
282
|
+
source = { state: 'VERIFIED', fileCount: bytes.fileCount, bytes: bytes.bytes, scope: root };
|
|
283
|
+
}
|
|
284
|
+
const observation = { deploymentId: id, targetRevision: target.revision, containers, imageMatches, source,
|
|
285
|
+
checkedAt: Date.now(), liveHealth: 'NOT_CHECKED', knownGoodIsHistorical: true };
|
|
286
|
+
revalidate();
|
|
287
|
+
this.s.store.audit({ principal: actor.id, workspaceId: this.s.workspaceId, tool: 'deployment.observe', refId: id, inputDigest: digestOf(observation), result: imageMatches ? 'image_matches' : 'image_differs_or_unavailable' });
|
|
288
|
+
if (!sourcePreview)
|
|
289
|
+
return observation;
|
|
290
|
+
if (!imageMatches || source['state'] !== 'VERIFIED' || !target.definition.sourceMapping)
|
|
291
|
+
throw new DodoError('NOT_SUPPORTED', 'verified running-container source is unavailable; no restore plan created');
|
|
292
|
+
// Verified bytes equal the immutable CAS manifest. R02 owns the actual
|
|
293
|
+
// preview/apply, current-state backup, conflicts and journal; Docker does
|
|
294
|
+
// not write a single workspace file or return the raw archive.
|
|
295
|
+
const restore = await this.r.history.preview(actor, { checkpointId: record.plan.checkpointId,
|
|
296
|
+
paths: [target.definition.sourceMapping.workspaceRoot], exactMirror: false });
|
|
297
|
+
revalidate();
|
|
298
|
+
return { observation, restore, sourceOnly: true, databaseChanged: false, containerRestarted: false };
|
|
299
|
+
});
|
|
300
|
+
}
|
|
301
|
+
async build(id, planHash, ctx) {
|
|
302
|
+
const revalidate = this.authority(ctx), actor = { id: ctx.principal.grantId, owner: isOwner(ctx.principal) };
|
|
303
|
+
return this.s.mutations.run(async () => {
|
|
304
|
+
revalidate();
|
|
305
|
+
const current = this.inspect(id, actor);
|
|
306
|
+
if (current.retention.imageRetired)
|
|
307
|
+
throw new DodoError('NOT_FOUND', 'recorded image was retired by the owner');
|
|
308
|
+
if (current.planHash !== planHash)
|
|
309
|
+
throw new DodoError('PLAN_HASH_MISMATCH', 'review the exact deployment plan');
|
|
310
|
+
if (current.state !== 'PREPARED')
|
|
311
|
+
return { ...current, replayed: true };
|
|
312
|
+
const record = await this.validate(id, planHash, actor, revalidate);
|
|
313
|
+
policyGate(ctx, { tool: 'deployment_build', action: 'exec', approvalAction: { deploymentId: id, planHash }, summary: 'build the reviewed source snapshot using the owner-registered Docker target' });
|
|
314
|
+
const target = record.target.definition, entries = buildContextEntries(record.manifest, target);
|
|
315
|
+
const archive = await packDeploymentSource(entries, e => this.r.storage.readObject(e.hash, e.bytes, this.r.policy().fileBytes), name => this.r.assertSourcePath(target.contextRoot === '.' ? name : `${target.contextRoot}/${name}`));
|
|
316
|
+
await this.validate(id, planHash, actor, revalidate);
|
|
317
|
+
this.outcome(id, 'BUILDING', { archiveHash: sha256Bytes(archive), retryAllowed: false });
|
|
318
|
+
try {
|
|
319
|
+
const adapter = this.adapter(id, planHash, actor, target, revalidate), imageDigest = await adapter.build(id, archive);
|
|
320
|
+
// Preserve actual image identity even if source verification or auth fails next.
|
|
321
|
+
this.db.prepare('UPDATE recovery_deployments SET image_digest=? WHERE id=?').run(imageDigest, id);
|
|
322
|
+
let source = { state: 'NOT_DECLARED', exactRecoveryAvailable: false };
|
|
323
|
+
if (target.sourceMapping) {
|
|
324
|
+
const mapped = mappedSourceEntries(record.manifest, target), root = target.sourceMapping.workspaceRoot;
|
|
325
|
+
const verified = await adapter.verifyImageSource(imageDigest, mapped, name => this.r.assertSourcePath(root === '.' ? name : `${root}/${name}`));
|
|
326
|
+
source = { state: 'VERIFIED', fileCount: verified.fileCount, bytes: verified.bytes, exactRecoveryAvailable: true };
|
|
327
|
+
}
|
|
328
|
+
await this.validate(id, planHash, actor, revalidate);
|
|
329
|
+
this.db.transaction(() => {
|
|
330
|
+
this.db.prepare('UPDATE recovery_deployments SET image_digest=? WHERE id=? AND workspace_id=?').run(imageDigest, id, this.s.workspaceId);
|
|
331
|
+
this.outcome(id, 'BUILT', { archiveHash: sha256Bytes(archive), imageDigest, source, builtAt: Date.now(), deployed: false });
|
|
332
|
+
}).immediate();
|
|
333
|
+
}
|
|
334
|
+
catch (error) {
|
|
335
|
+
this.outcome(id, 'UNKNOWN', { errorCode: error instanceof DodoError ? error.code : 'INTERNAL_ERROR', stage: 'build', retryAllowed: false });
|
|
336
|
+
}
|
|
337
|
+
return { ...this.inspect(id, actor), replayed: false };
|
|
338
|
+
});
|
|
339
|
+
}
|
|
340
|
+
async apply(id, planHash, imageDigest, ctx) {
|
|
341
|
+
const revalidate = this.authority(ctx), actor = { id: ctx.principal.grantId, owner: isOwner(ctx.principal) };
|
|
342
|
+
return this.s.mutations.run(async () => {
|
|
343
|
+
revalidate();
|
|
344
|
+
const current = this.inspect(id, actor);
|
|
345
|
+
if (current.retention.imageRetired)
|
|
346
|
+
throw new DodoError('NOT_FOUND', 'recorded image was retired by the owner');
|
|
347
|
+
if (current.planHash !== planHash || current.imageDigest !== imageDigest)
|
|
348
|
+
throw new DodoError('PLAN_HASH_MISMATCH', 'review the recorded image digest and deployment plan');
|
|
349
|
+
if (current.state !== 'BUILT')
|
|
350
|
+
return { ...current, replayed: true };
|
|
351
|
+
const record = await this.validate(id, planHash, actor, revalidate), target = record.target.definition;
|
|
352
|
+
policyGate(ctx, { tool: 'deployment_apply', action: 'exec', approvalAction: { deploymentId: id, planHash, imageDigest }, summary: 'deploy the reviewed immutable image to its owner-registered service; no database migration or volume deletion' });
|
|
353
|
+
const adapter = this.adapter(id, planHash, actor, target, revalidate);
|
|
354
|
+
const previous = this.db.prepare('SELECT deployment_id,revision FROM recovery_production_pointers WHERE target_id=?').get(record.target.id);
|
|
355
|
+
const prior = previous ? this.inspect(previous.deployment_id, { id: actor.id, owner: true }) : undefined;
|
|
356
|
+
const actual = await adapter.containers();
|
|
357
|
+
const oldIds = prior?.outcome?.['containerIds'];
|
|
358
|
+
const differs = record.plan.rollback
|
|
359
|
+
? digestOf(actual) !== record.plan.rollback.observedContainersHash || (previous?.revision ?? 0) !== record.plan.rollback.pointerRevision
|
|
360
|
+
: prior ? !Array.isArray(oldIds) || actual.length !== oldIds.length || actual.some(c => c.image !== prior.imageDigest || !oldIds.includes(c.id)) : actual.length > 0;
|
|
361
|
+
if (differs)
|
|
362
|
+
throw new DodoError('CONFLICT', 'running service provenance differs or is unknown; inspect external changes before deployment');
|
|
363
|
+
await this.validate(id, planHash, actor, revalidate);
|
|
364
|
+
this.outcome(id, 'DEPLOYING', { imageDigest, previousDeploymentId: previous?.deployment_id ?? null, intendedService: target.service, retryAllowed: false });
|
|
365
|
+
try {
|
|
366
|
+
await adapter.deploy(imageDigest);
|
|
367
|
+
const observed = await adapter.containers();
|
|
368
|
+
if (observed.length !== 1 || !observed[0].running || observed[0].image !== imageDigest)
|
|
369
|
+
throw new DodoError('CONFLICT', 'deployed container identity/image or running state differs');
|
|
370
|
+
this.outcome(id, 'HEALTH_CHECKING', { imageDigest, containerIds: observed.map(c => c.id), retryAllowed: false });
|
|
371
|
+
const started = Date.now();
|
|
372
|
+
let samples = 0;
|
|
373
|
+
let lastChecks = [];
|
|
374
|
+
do {
|
|
375
|
+
if (samples)
|
|
376
|
+
await new Promise(resolve => setTimeout(resolve, target.intervalMs));
|
|
377
|
+
revalidate();
|
|
378
|
+
lastChecks = [];
|
|
379
|
+
for (const check of target.health) {
|
|
380
|
+
const result = evaluateHealth(check, await readHealth(check, this.networkPolicy, revalidate));
|
|
381
|
+
lastChecks.push(result);
|
|
382
|
+
if (!result.passed) {
|
|
383
|
+
this.outcome(id, 'FAILED', { imageDigest, containerIds: observed.map(c => c.id), checks: lastChecks, reason: 'required_health_failed', previousKnownGoodUnchanged: true });
|
|
384
|
+
return { ...this.inspect(id, actor), replayed: false };
|
|
385
|
+
}
|
|
386
|
+
}
|
|
387
|
+
samples++;
|
|
388
|
+
} while (samples < 2 || Date.now() - started < target.stabilizationMs);
|
|
389
|
+
const final = await adapter.containers();
|
|
390
|
+
if (digestOf(final) !== digestOf(observed))
|
|
391
|
+
throw new DodoError('CONFLICT', 'container state changed during stabilization');
|
|
392
|
+
await this.validate(id, planHash, actor, revalidate);
|
|
393
|
+
this.db.transaction(() => {
|
|
394
|
+
const live = this.db.prepare('SELECT revision FROM recovery_production_pointers WHERE target_id=?').get(record.target.id);
|
|
395
|
+
if ((live?.revision ?? 0) !== (previous?.revision ?? 0))
|
|
396
|
+
throw new DodoError('CONFLICT', 'known-good pointer changed while checking deployment');
|
|
397
|
+
revalidate();
|
|
398
|
+
this.outcome(id, 'KNOWN_GOOD', { imageDigest, containerIds: final.map(c => c.id), checks: lastChecks, samples, stabilizationMs: Date.now() - started,
|
|
399
|
+
completedAt: Date.now(), coverage: 'recorded_source_build_required_tests_and_owner_health_checks', databaseChangedByAdapter: false });
|
|
400
|
+
this.db.prepare(`INSERT INTO recovery_production_pointers VALUES (?,?,?,?,?) ON CONFLICT(target_id) DO UPDATE SET deployment_id=excluded.deployment_id,
|
|
401
|
+
previous_id=excluded.previous_id,revision=excluded.revision,updated_at=excluded.updated_at`).run(record.target.id, id, previous?.deployment_id ?? null, (previous?.revision ?? 0) + 1, Date.now());
|
|
402
|
+
}).immediate();
|
|
403
|
+
}
|
|
404
|
+
catch (error) {
|
|
405
|
+
this.outcome(id, 'UNKNOWN', { imageDigest, errorCode: error instanceof DodoError ? error.code : 'INTERNAL_ERROR', stage: 'deploy_or_health', retryAllowed: false, previousKnownGoodUnchanged: true });
|
|
406
|
+
}
|
|
407
|
+
return { ...this.inspect(id, actor), replayed: false };
|
|
408
|
+
});
|
|
409
|
+
}
|
|
410
|
+
/** Owner-only maintenance; never registered as an MCP definition. */
|
|
411
|
+
async maintenance(raw, ctx) {
|
|
412
|
+
if (!isOwner(ctx.principal) || ctx.principal.grantId !== 'local-config-owner')
|
|
413
|
+
throw new DodoError('FORBIDDEN', 'private owner administration required');
|
|
414
|
+
const input = DeploymentMaintenanceInput.parse(raw), revalidate = this.authority(ctx), actor = { id: ctx.principal.grantId, owner: true };
|
|
415
|
+
return this.s.mutations.run(async () => {
|
|
416
|
+
revalidate();
|
|
417
|
+
policyGate(ctx, { tool: 'deployment.maintenance', action: input.action === 'pin' ? 'plan' : 'exec', approvalAction: input,
|
|
418
|
+
summary: 'owner-reviewed deployment maintenance; no force removal, volume deletion or automatic uncertain retry' });
|
|
419
|
+
const maintenance = new DeploymentMaintenance(this.s, revalidate, id => this.inspect(id, actor), id => this.target(id), (record, target) => this.adapter(record.plan.deploymentId, record.planHash, actor, target.definition, revalidate));
|
|
420
|
+
return maintenance.execute(input);
|
|
421
|
+
});
|
|
422
|
+
}
|
|
423
|
+
/** Exclusive runtime lease only: never resume effects after restart. */
|
|
424
|
+
reconcile() {
|
|
425
|
+
this.db.prepare("UPDATE recovery_deployments SET state='UNKNOWN',result_json=? WHERE workspace_id=? AND state IN ('BUILDING','DEPLOYING','HEALTH_CHECKING')")
|
|
426
|
+
.run(JSON.stringify({ reason: 'process_interrupted', retryAllowed: false }), this.s.workspaceId);
|
|
427
|
+
}
|
|
428
|
+
}
|
|
429
|
+
//# sourceMappingURL=deploymentService.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deploymentService.js","sourceRoot":"","sources":["../../../src/services/recovery/deploymentService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAIrD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,sBAAsB,EAAoE,MAAM,0BAA0B,CAAC;AACpI,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACpG,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAgB,MAAM,wBAAwB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAK7D,uFAAuF;AACvF,MAAM,OAAO,mBAAmB;IACD;IAAiC;IAA9D,YAA6B,CAAc,EAAmB,CAAkB;QAAnD,MAAC,GAAD,CAAC,CAAa;QAAmB,MAAC,GAAD,CAAC,CAAiB;IAAG,CAAC;IACpF,IAAY,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,IAAY,aAAa,KAAK,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAChH,MAAM,CAAC,EAAU;QACvB,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,yEAAyE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAA0B,CAAC;QAC5J,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,gDAAgD,CAAC,CAAC;QAC7F,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IACvH,CAAC;IACD,OAAO;QACL,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,6EAA6E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAA0B,CAAC;QAC7J,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO;QACL,MAAM,KAAK,GAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4EAA4E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAmB,CAAC,CAAC,CAAC;QACzJ,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,gBAAgB,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;IAC/H,CAAC;IACD,4FAA4F;IAC5F,KAAK,CAAC,SAAS,CAAC,GAAY,EAAE,UAAsB;QAClD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACtI,UAAU,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClG,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAC1B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,CAAC;gBAC7I,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG;oBAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;YACvD,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,MAAM;gBAAE,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAClE,IAAI,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAAC,CAAC;gBAC3H,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,gFAAgF,CAAC,CAAC;YACpH,UAAU,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxE,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,gBAAgB;oBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,2DAA2D,CAAC,CAAC;gBACtJ,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,EAAE;oBAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,CAAC;gBACvH,IAAI,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uPAAuP,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACvS,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,oEAAoE,CAAC,CAAC;gBACxG,MAAM,EAAE,GAAG,QAAQ,EAAE,EAAE,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;gBACvF,sFAAsF;gBACtF,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iHAAiH,CAAC;qBACjJ,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACzD,IAAI,SAAS;oBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,mDAAmD,CAAC,CAAC;gBACpG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;kJAE0H,CAAC;qBACxI,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC5I,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;gBAClN,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IACO,GAAG,CAAC,EAAU,EAAE,KAAoB;QAC1C,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAwB,CAAC;QACnJ,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,gDAAgD,CAAC,CAAC;QACzI,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,CAAC,EAAU,EAAE,KAAoB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAmB,CAAC;QAClF,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;QACnH,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0HAA0H,CAAC,CAAC,GAAG,CAAC,EAAE,CAAyH,CAAC;QAChS,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,YAAY;YACrF,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,IAAI,CAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAuB,CAAC,OAAO,CAAC,EAAE,uBAAuB,EAAE,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,YAAY,CAAW,CAAC,CAAC,CAAC,IAAI,EAAE;YAC5X,OAAO,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAA4B,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,CAAC,KAAoB,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE;QAC/C,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACzI,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4DAA4D,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,+CAA+C,CAAC;aACtK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAA0B,CAAC;QACrH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9J,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,GAAY,EAAE,KAAoB,EAAE,UAAsB;QACtE,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;YAC/G,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChH,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YAAC,UAAU,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,sBAAsB,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;YAC3K,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kGAAkG,CAAC;iBACjI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,CAAqD,CAAC;YAC9F,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,QAAQ,CAAC,YAAY,KAAK,WAAW;oBAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,EAAE,+CAA+C,CAAC,CAAC;gBACxI,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACjE,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAK,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kEAAkE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAgB,CAAC,CAAC,IAAI,GAAG;gBAC7H,MAAM,IAAI,SAAS,CAAC,gBAAgB,EAAE,iDAAiD,CAAC,CAAC;YAC3F,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,6DAA6D,CAAC,CAAC;YACjJ,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,sBAAsB;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAC;YAC/H,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YAC/E,IAAI,YAAY,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,YAAY,CAAC,QAAQ;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,2DAA2D,CAAC,CAAC;YAC9J,IAAI,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,QAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACxG,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjG,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,mEAAmE,CAAC,CAAC;YACvG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACjF,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO;gBAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACjE,MAAM,YAAY,GAAG,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,YAAY,KAAK,oBAAoB,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,2CAA2C,CAAC,CAAC;YAC3J,UAAU,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,IAAI,GAAmB,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK;gBAC5H,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI;gBAC3I,YAAY,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,CAAC,OAAO,CAAC;gBACvH,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;YAC1I,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBACvB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;kDAC0B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;gBACtL,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACjM,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,6EAA6E;IAC7E,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,QAAgB,EAAE,KAAoB,EAAE,UAAsB;QACvF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QACxD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,kCAAkC,CAAC,CAAC;QAChH,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,iBAAiB,EAAE,oEAAoE,CAAC,CAAC;QAC/L,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS;YAAE,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,6CAA6C,CAAC,CAAC;QACjH,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,2CAA2C,CAAC,CAAC;QAC/H,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,UAAU;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;QACvI,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC/D,KAAK,MAAM,KAAK,IAAI,CAAC,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,IAAI,oBAAoB,CAAC,mBAAmB,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa;YACvH,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,4DAA4D,CAAC,CAAC;QACzG,IAAI,oBAAoB,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY;YAAE,MAAM,IAAI,SAAS,CAAC,cAAc,EAAE,wCAAwC,CAAC,CAAC;QAC1J,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YAClE,IAAI,QAAQ,CAAC,KAAK,KAAK,YAAY,IAAI,QAAQ,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;mBAC9H,QAAQ,CAAC,IAAI,CAAC,kBAAkB,KAAK,CAAC,CAAC,kBAAkB,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;gBACzG,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,iEAAiE,CAAC,CAAC;QAChH,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YAC5E,IAAI,YAAY,CAAC,KAAK,KAAK,UAAU,IAAI,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,kBAAkB;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,8CAA8C,CAAC,CAAC;QACrL,CAAC;QACD,UAAU,EAAE,CAAC;QACb,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,KAAoB;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC3G,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzH,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;YAC9G,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,oCAAoC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACjG,CAAC;IACO,SAAS,CAAC,GAAY;QAC5B,4EAA4E;QAC5E,mEAAmE;QACnE,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG;eACzG,GAAG,CAAC,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,UAAU;YAC5G,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC;QACvF,OAAO,GAAG,EAAE;YACV,GAAG,CAAC,UAAW,EAAE,CAAC;YAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,GAAG,CAAC,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;QACjK,CAAC,CAAC;IACJ,CAAC;IACO,OAAO,CAAC,EAAU,EAAE,QAAgB,EAAE,KAAoB,EAAE,MAAwB,EAAE,UAAsB;QAClH,OAAO,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YACxF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7G,CAAC,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE;YAChF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4JAA4J,CAAC,CAAC,GAAG,CAAC,EAAE,EAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9M,CAAC,CAAC,CAAC;IACL,CAAC;IACO,OAAO,CAAC,EAAU,EAAE,KAAsB,EAAE,KAA8B;QAChF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qFAAqF,CAAC;aACnG,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,EAAU,EAAE,cAAsB,EAAE,GAAY;QACpE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7G,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YAAC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrG,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;YACzG,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kGAAkG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,CAAqD,CAAC;YAC3N,IAAI,GAAG,EAAE,CAAC;gBACR,IAAI,GAAG,CAAC,YAAY,KAAK,WAAW;oBAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,EAAE,wCAAwC,CAAC,CAAC;gBAC5H,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,SAAS,CAAC,YAAY;gBACxL,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,iFAAiF,CAAC,CAAC;YACrH,UAAU,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE;gBACrK,OAAO,EAAE,6GAA6G,EAAE,CAAC,CAAC;YAC5H,MAAM,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAC1F,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAClF,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;YACpI,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO;gBAAE,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAqC,CAAC;YAC1J,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,GAAmB,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK;gBACpI,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,oBAAoB,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;gBAC9G,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK;gBAC5E,QAAQ,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,sBAAsB,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;YAC9H,UAAU,EAAE,CAAC;YACb,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;iDAC2B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,WAAW,EACxI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,KAAK,EAAE,gCAAgC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC3M,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,6BAA6B,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACvM,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,+FAA+F;IAC/F,KAAK,CAAC,OAAO,CAAC,EAAU,EAAE,GAAY,EAAE,aAAa,GAAG,KAAK;QAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7G,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YAAC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,UAAU;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,qEAAqE,CAAC,CAAC;YACtK,UAAU,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,oBAAoB,EAAE,MAAM,EAAE,MAAM;gBACxG,cAAc,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,sGAAsG,EAAE,CAAC,CAAC;YACpL,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YACxF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,CAAE,CAAC,KAAK,KAAK,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3H,IAAI,MAAM,GAA4B,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;YACjH,IAAI,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;gBACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;gBAChF,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,EAAE,yBAAyB,CAAC,CAAC;gBACzH,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC;gBACtH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,MAAM,CAAC,WAAY,EAAE,MAAM,EAC5F,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC5E,MAAM,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAC9F,CAAC;YACD,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM;gBACvG,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;YAClF,UAAU,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,8BAA8B,EAAE,CAAC,CAAC;YACjO,IAAI,CAAC,aAAa;gBAAE,OAAO,WAAW,CAAC;YACvC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa;gBACrF,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,2EAA2E,CAAC,CAAC;YACpH,uEAAuE;YACvE,0EAA0E;YAC1E,+DAA+D;YAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;gBAC1F,KAAK,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;YAChF,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;QACrH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,QAAgB,EAAE,GAAY;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7G,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YAAC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,SAAS,CAAC,YAAY;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;YAChH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,kCAAkC,CAAC,CAAC;YACjH,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU;gBAAE,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACpE,UAAU,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,6EAA6E,EAAE,CAAC,CAAC;YACtM,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChG,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAChD,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,EAC3E,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YACxG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,WAAW,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;gBACtH,iFAAiF;gBACjF,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,CAAC,WAAW,EAAC,EAAE,CAAC,CAAC;gBACjG,IAAI,MAAM,GAA4B,EAAE,KAAK,EAAE,cAAc,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC;gBAC/F,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC;oBACvG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;oBAChJ,MAAM,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC;gBACrH,CAAC;gBACD,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;gBACrD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;oBACvB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8EAA8E,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;oBACzI,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9H,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,KAAK,YAAY,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9I,CAAC;YACD,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,QAAgB,EAAE,WAAmB,EAAE,GAAY;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7G,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YAAC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACtD,IAAI,OAAO,CAAC,SAAS,CAAC,YAAY;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,yCAAyC,CAAC,CAAC;YAChH,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW;gBAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,EAAE,sDAAsD,CAAC,CAAC;YAC5K,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO;gBAAE,OAAO,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;YACvG,UAAU,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,+GAA+G,EAAE,CAAC,CAAC;YACrP,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mFAAmF,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAA4D,CAAC;YACvM,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,cAAc,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ;gBAClC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,sBAAsB,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe;gBACxI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YACvK,IAAI,OAAO;gBACT,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,8FAA8F,CAAC,CAAC;YAClI,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;YACrD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,WAAW,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,IAAI,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5J,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAClC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC,CAAE,CAAC,KAAK,KAAK,WAAW;oBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,4DAA4D,CAAC,CAAC;gBACxL,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,iBAAiB,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,IAAI,OAAO,GAAG,CAAC,CAAC;gBAC5C,IAAI,UAAU,GAAwC,EAAE,CAAC;gBACzD,GAAG,CAAC;oBACF,IAAI,OAAO;wBAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;oBAClF,UAAU,EAAE,CAAC;oBAAC,UAAU,GAAG,EAAE,CAAC;oBAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;wBAClC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;wBAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACvH,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;4BACnB,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,wBAAwB,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,CAAC;4BAC3K,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;wBACzD,CAAC;oBACH,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC,QAAQ,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,MAAM,CAAC,eAAe,EAAE;gBACvE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;gBACzC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,8CAA8C,CAAC,CAAC;gBAC5H,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;gBACrD,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;oBACvB,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qEAAqE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAqC,CAAC;oBAC9J,IAAI,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC;wBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,sDAAsD,CAAC,CAAC;oBACjJ,UAAU,EAAE,CAAC;oBACb,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;wBAClJ,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,8DAA8D,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,CAAC;oBACxI,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;uGAC6E,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,IAAI,IAAI,EAAE,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACvM,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,YAAY,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,CAAC;YAC1N,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACzD,CAAC,CAAC,CAAC;IACL,CAAC;IACD,qEAAqE;IACrE,KAAK,CAAC,WAAW,CAAC,GAAY,EAAE,GAAY;QAC1C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,oBAAoB;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,uCAAuC,CAAC,CAAC;QACzJ,MAAM,KAAK,GAAG,0BAA0B,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,EAAC,EAAE,EAAC,GAAG,CAAC,SAAS,CAAC,OAAO,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC;QACrI,OAAO,IAAI,CAAC,CAAC,CAAC,SAAU,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtC,UAAU,EAAE,CAAC;YACb,UAAU,CAAC,GAAG,EAAC,EAAC,IAAI,EAAC,wBAAwB,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,KAAG,KAAK,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,MAAM,EAAC,cAAc,EAAC,KAAK;gBAC1G,OAAO,EAAC,uGAAuG,EAAC,CAAC,CAAC;YACpH,MAAM,WAAW,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,EAAC,UAAU,EAAC,EAAE,CAAA,EAAE,CAAA,IAAI,CAAC,OAAO,CAAC,EAAE,EAAC,KAAK,CAAC,EAAC,EAAE,CAAA,EAAE,CAAA,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAC5G,CAAC,MAAM,EAAC,MAAM,EAAC,EAAE,CAAA,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAC,MAAM,CAAC,QAAQ,EAAC,KAAK,EAAC,MAAM,CAAC,UAAU,EAAC,UAAU,CAAC,CAAC,CAAC;YAC9G,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IACD,wEAAwE;IACxE,SAAS;QACP,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,4IAA4I,CAAC;aAC1J,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACrG,CAAC;CACF"}
|
|
@@ -0,0 +1,36 @@
|
|
|
1
|
+
import { DodoError } from '../../errors.js';
|
|
2
|
+
import { digestOf } from '../../util/hash.js';
|
|
3
|
+
/** Ignore directory inodes, never file bytes, permissions or coverage. */
|
|
4
|
+
export function recoverySourceDigest(entries) {
|
|
5
|
+
return digestOf(entries.map(({ path, kind, hash, bytes, mode }) => ({ path, kind, hash, bytes, mode }))
|
|
6
|
+
.sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
|
|
7
|
+
}
|
|
8
|
+
export function buildContextEntries(manifest, target) {
|
|
9
|
+
const root = target.contextRoot;
|
|
10
|
+
const entries = manifest.entries.filter(e => e.kind !== 'absent' && (root === '.' || e.path.startsWith(root + '/')))
|
|
11
|
+
.map(e => ({ ...e, path: root === '.' ? e.path : e.path.slice(root.length + 1) }));
|
|
12
|
+
if (!entries.some(e => e.path === target.dockerfile && e.kind === 'file'))
|
|
13
|
+
throw new DodoError('NOT_FOUND', 'approved Dockerfile is not in the complete source checkpoint');
|
|
14
|
+
// Ignore files participate in the sealed context digest. They can only remove
|
|
15
|
+
// already-allowed source; image source recovery still requires exact coverage.
|
|
16
|
+
return entries;
|
|
17
|
+
}
|
|
18
|
+
export function mappedSourceEntries(manifest, target) {
|
|
19
|
+
if (!target.sourceMapping)
|
|
20
|
+
throw new DodoError('NOT_SUPPORTED', 'owner has not declared an image source mapping');
|
|
21
|
+
const root = target.sourceMapping.workspaceRoot;
|
|
22
|
+
return manifest.entries.filter(e => e.kind !== 'absent' && (root === '.' || e.path.startsWith(root + '/')))
|
|
23
|
+
.map(e => ({ ...e, path: root === '.' ? e.path : e.path.slice(root.length + 1) }));
|
|
24
|
+
}
|
|
25
|
+
export function sourceComparison(expected, current, limit = 50) {
|
|
26
|
+
const before = new Map(expected.map(e => [e.path, e]));
|
|
27
|
+
const after = new Map(current.map(e => [e.path, e]));
|
|
28
|
+
const changes = [];
|
|
29
|
+
for (const path of [...new Set([...before.keys(), ...after.keys()])].sort()) {
|
|
30
|
+
const a = before.get(path), b = after.get(path);
|
|
31
|
+
if (recoverySourceDigest(a ? [a] : []) !== recoverySourceDigest(b ? [b] : []))
|
|
32
|
+
changes.push({ path, change: !b || b.kind === 'absent' ? 'deleted' : !a || a.kind === 'absent' ? 'added' : 'modified' });
|
|
33
|
+
}
|
|
34
|
+
return { matches: !changes.length, changedCount: changes.length, changes: changes.slice(0, limit), truncated: changes.length > limit };
|
|
35
|
+
}
|
|
36
|
+
//# sourceMappingURL=deploymentSource.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"deploymentSource.js","sourceRoot":"","sources":["../../../src/services/recovery/deploymentSource.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,OAAwB;IAC3D,OAAO,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;SACpG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA0B,EAAE,MAAwB;IACtF,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;IAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;SACjH,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,WAAW,EAAE,8DAA8D,CAAC,CAAC;IACnG,8EAA8E;IAC9E,+EAA+E;IAC/E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAA0B,EAAE,MAAwB;IACtF,IAAI,CAAC,MAAM,CAAC,aAAa;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,EAAE,gDAAgD,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC;IAChD,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;SACxG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAyB,EAAE,OAAwB,EAAE,KAAK,GAAG,EAAE;IAC9F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAsE,EAAE,CAAC;IACtF,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5E,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;AACzI,CAAC"}
|